Huo Xing Cai Jing reports that on September 28, the GoPlus security team disclosed the discovery of a high-risk fraudulent Meme factory on Robinhood Chain, with over $9 million in volume over the past 30 days and hundreds of fraudulent Meme tokens involved. The asset aggregation address is 0x8c3Bad30cc7563A2D0357F49509FFd063666bb00. As of September 28, 2026, the address balance was approximately 56.0635 ETH, equivalent to about $148,000; the address has recorded approximately 1,385 transactions, with recent transactions including inflows of approximately 1,728.02 ETH and outflows of approximately 1,861.12 ETH, resulting in a total two-way volume of approximately 3,589.14 ETH, equivalent to about $9.49 million. Direct evidence of the pattern “approve or sell tokens → drain ETH → transfer to the same aggregation address” was found in all high-risk associated Meme tokens. The amounts represent gross inflows into the aggregation system per project and do not reflect net profits. The fraudulent Meme factory model primarily consists of “new account dump → layered aggregation → fund recycling”: 1. Create tokens based on current industry trends; 2. Distribute tokens to a large number of new EOA wallets with only 4–11 transactions each; 3. Sell tokens in stages via PonsV2Helper / UniversalRouter; 4. Drain ETH to local aggregators or the main aggregation address (0x8c3bad); 5. Reuse funds to finance the next project, new wallets, and trading operations. Key elements of this fraud scheme include: 1. Using numerous new wallets to conceal actual concentration of holdings; 2. Gradual selling through these wallets to simulate the appearance of multiple independent traders; 3. Consolidating proceeds into the same aggregation system after dumping; 4. Reinvesting profits from previous projects into the next round. On-chain researcher Wazz recently disclosed that a suspected consecutive rug-pull group launched at least 53 Meme tokens on Robinhood Chain within approximately two months, extracting around $18.43 million. Their primary method involved controlling the majority of token supply using 70–200 wallets and reinvesting proceeds from one round into the next. This case exhibits a similar fraud pattern to the current one, but there is currently no evidence indicating they are operated by the same group.
GoPlus Discovers High-Risk Meme Rug Pull Factory on Robinhood Chain with Over $9M in Volume
MarsBitShare
Summary
On-chain news from September 28, 2026, reveals that the GoPlus security team uncovered a high-risk Meme token factory on the Robinhood Chain. The factory generated over $9.49 million in trading volume within 30 days, with asset aggregation occurring at the address 0x8c3Bad30cc7563A2D0357F49509FFd063666bb00. This address held 56.0635 ETH, valued at $148,000, and recorded 1,385 transactions. Rug pull indicators follow a consistent pattern: token approval → ETH liquidation → funds transferred to the same address. The fraudulent scheme employs newly created wallets, segmented sales, and reinvestment of profits. A similar case uncovered by Wazz implicated a group responsible for $18.43 million in suspected rug pulls, though no direct connection has been confirmed.
Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information.
Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.